Post Installation SQL user management

post install, what level do the global permissions need to be for the concrete5 sql user? I was able to find the setting requirements for the database level but I want to lockdown my server. does it need to stay the same as the perms on the database level?